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Abstract 

Discovered by Bose, Chaudhuri and Hocquenghem pQ, pTJ, the 
BCH family of error correcting codes are one of the most studied fam- 
ilies in coding theory. They are also among the best performing codes, 
particularly when the number of errors being corrected is small rela- 
tive to the code length. In this article we consider binary codes with 
minimum distance of 7. We construct new families of codes with these 
BCH parameters via a generalisation of the Kasami- Welch Theorem. 

1 Introduction 

Let L = GF(2 n ) for some odd n and let L* denote the non zero elements of 
L. Also, let f(x) and g(x) be two mappings from L to itself. We assume the 
functions are chosen such that /(0) = g(0) = 0. We can construct the parity 
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check matrix H of an error correcting code C as follows. 



x 

H= .... f(x) .... 
.... g(x) .... 

The code C is defined as the nullspace of H. Each column is a binary vector 
of length 3n composed of the binary representations of three elements of L* 
with respect to some chosen basis. This matrix is a 3n by 2 n — 1 array and 
hence C has parameters [2 n — l,2 n — 3n — l,d]. This means that C is a 
code of dimension 2 n — 3n — 1 and minimum Hamming distance d between 
any pair of vectors (usually called words). The number of errors a code can 
correct is given by e = The code generated by the rows of H is called 
the dual of C and is denoted by C ± . We can determine the weights of the 
words in C by computing the generalised Fourier transform of the pair of 
functions {f(x),g(x)}. We define this transform as 

F w (a,b,c)= {-l) Tr{ - ax+bf ^ +C9 ^ 

x£GF(2 n ) 

with b, c G L* and a G L. In order to demonstrate that the minimum 
distance of C is 7 we will require this transform to be limited to five specified 
values. We will also require at least one of our functions to be Almost 
Perfect Nonlinear (APN). The map h is said to be APN on L if the number 
of solutions in L of the equation 

h(x + q) — h(x) = p 

is at most 2, for all p G L and q G L*. An APN function can be used 
to construct a code with double error correcting BCH parameters. For an 
introduction to the connections between Fourier transforms, APN functions 
and BCH codes, we recommend pages 1037-1039 of [5j. The weights in C L 
are given by w = i(2 n -1/), where V ranges over the values of F w (a, b, c). If 
at least one of the pair {f(x),g(x}} is APN then the code constructed with 
this pair will have a minimum distance of at least 5 as it will be the subcode 
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of a code with double error correcting BCH parameters (p] page 1037). The 
Mac Williams identities ([3] page 88) are a set of equations that allow us to 
compute the weight distribution of a linear code from the weight distribution 
of its dual. Let A w be the number of codewords in C with weight w. As the 
distance in C is at least 5 we have, A 4 = A 3 = A 2 = Ax = and A = 1. 
If we demonstrate that the weights in C 1 - take the same five values as those 
occuring in the dual of the triple error correcting BCH code, then we can 
use the MacWilliams identities to compute the multiplicity of the weights 
occuring in C^. As we have five equations in five unknowns the multiplicity 
is exactly determined. Therefore C and hence C must have the same weight 
distribution as the triple error correcting BCH code. The words in the dual of 
the triple error correcting BCH take the five weig hts 2 n - 1 -2 2 V, 2"- 1 + 2V ) 
2"-i - 2^, 2"" 1 + 2^ and 2 n -\ It follows that if we show that F w (a, b, c) 

n + 1 ri + 3 

is limited to the five values 0, ±2^~, ±2^~ for some pair of functions with 
at least one being APN, then the code constructed from this pair will have 
a minimum distance of 7. 
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2 Known Families of Codes 



The following table lists the known triple error correcting codes that can 
be constructed with pairs of functions over GF(2 n ) via the method outlined 
above. 



f(x),g(x) 


Conditions 


Ref. 


x 2 fc +l ^ x 2 2fc +l 


gcd(n, k) = 1 


in, a 

Theorem 1 


x 2 fe +l ^ x 2 3fe +l 


gcd(n, k) = 1 


[73 

Theorem 1 


x 2 l +l ^ x 2 t + 2 +3 


n = 2t + 1 


[9J 


x 2 2k -2 k +l x 2 4fc -2 3fc +2 2fc -2 fe +l 


gcd(n, k) = 1 


Theorem 2 



Next we will demonstrate that the first two pairs of functions from the 
above table indeed allow us to construct codes with a minimum distance of 
7. We do this by computing the generalised Fourier transforms of each pair. 
We believe that the results in this section are well known to those working 
in the area but we have not seen a proof in the litreture. The codes given 
by the first family are a generalisation of the classic, also called primitive, 
BCH codes defined by the pair of functions {x 3 ,x 5 }. The second family 
generalises the non-BCH triple error correcting codes from [7] defined by the 
pair of functions {x 2t+1 ,x 2t when n — 2t + 1. Before we proceed, we 
state the following often used result, a proof of which can be found in [2]. 



4 



Lemma 1 Let L = GF(2 n ) and let p{x) = Ylt=o r i x2> " ^ e a polynomial in 
L[x] with Ti e L and gcd(k,n) = 1. Then p(x) has at most 2 d solutions in 
L. 

Theorem 2 Let n be odd and k relatively prime to n. The pair of functions 
{x 2k+1 , g(x)} construct a triple error correcting code with BCH parameters 
whenever g(x) = x 22k+1 or x 23k+1 . 

Proof: 

As x 2k+1 is APN p3j, we can obtain the result by showing that the generalised 

n | 3 

Fourier transform always takes one of the five values 0, ±2 _ 2 - or ±2 _ 2 - . Let 
g{x) = x 2tk+1 where t = 2 or 3. 
By definition, we have 

F w (a,b,c) = J2{-l) Tv{ax+bx2k+1+cx2tk+1) . 

x&L 

We let Q(x) = ax + bx 2k+1 + cx 2±k+1 and take the square of the transform to 
get, 

(F w (a,b,c)) 2 = ^^(_l) T ^))(-l) T ^)). 
Replace y with x + u to obtain 

(F>, 6, c)) 2 = J2(-lf r{Q(u)) ^(-l) TrWi(u))) , 

U X 

where 

T( v ) _ ft ?/ 2 fc , h 2~ k 2~ k , 2 tk , 2~ tk 2- tk 

i^yuj — oa ~r v a cu \ c a 

Next we use the the fact that Yl x (~ l) Tr ^' yx ^ is 2 n when 7 = 0, and is 
otherwise to obtain 

(F w (a, b, c)) 2 = T J2(-l) Tr{Q(u)) 

where K is the kernel of L(u). Consider x( u ) = (— i) Tr ^ (u ^. It can be 
easily demonstrated that \ a is a character of K as x( u + v ) — x( u )x( v )- 
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Now using the fact that, for a character x of a group H, ^2 hGH x(h) = \H\ 
if x is the identity character and otherwise (see [5j, 62-63) we see that 
(F w (a, b, c)) 2 = or 2 n+s , where 2 s is the number of solutions to L(u) = 0. 
Raising L(u) by 2 tk we obtain the following equation 

2 tk 2 (t+i)fc , 2 (t-l)fc 2( t " 1 ) fc , 2 2tfc , n 

b u +6 w + cu + cu = 0. 

Next we apply Lemma 1 and hence bound s by 2 s < 2 4 when t = 2 and 
2 s < 2 3 when t = 3. As F w (a, b, c) must be an integer, in both cases we have 

Tl-t-1 Tl I 3 

F w (a, b, c) = , ±2 "a - or dz2^~ and we are done. 



3 New Families of Codes 

In this section we prove that the fourth pair of functions from the list yield 
a code that is triple error correcting. Again, we do this by computing the 
generalised Fourier transform. The proof uses some of the techniques from 
Hans Dobbertin's proof of the Kasami- Welch theorem [3]. 

Theorem 3 For n odd and k relatively prime to n, the pair of functions 
{x 22k ~ 2k+1 , x 2ik ~^ ik +22k ~ 2k +l } on GF(2 n ) construct a triple error correcting 
code with BCH parameters. 

Proof: 

Again, as x 22k ~ 2k+1 is APN [3J, we achieve the result by computing the gen- 
eralised Fourier transform. By definition, 



F w (a,b,c) 



x£GF(2 n ) 



,Tr{ax+bx^ k ^ k +^+cx^ k ~^ k +^ k -^+^) 



Replacing x with x 2k+1 (a permutation) we obtain 



x&GF(2 n ) 
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Letting Q(x) = ax 2k+1 + bx 2 ' ih+1 + cx 2 '' k+1 and squaring gives, 
(F w (a,b, c)) 2 = J2J2(-V Tr(Q{X)+Qiy)) - 

x y 

Let y = x + u to obtain 

(F w (a, b, c)f = J2(-l) Tr(Q(u)) J2(-l) Tr{x{L{u))) 

U X 

where 

r , \ r>k o — k o — k _ o3fc -, o — 3fc q — 3fc o5fc q — 5fc n — 5fc 

L(«) = aw 2 + a 2 w 2 + bu 2 + b 2 u 2 + cu 2 + c 2 u 2 . 
As l) Tr( ' 7:E ^ is 2 n when 7 = 0, and is otherwise, we have 



(F w (a,b, c )) 2 = 2 n J2(-±) TriQ{u) ' 

ueK 



where K is the kernel of L(u). Let K — S U Si, where 

S = { u E K : Tr{Q{u)) = 0} 

and 

ft = {u e K : Tr(Q(u)) = 1}. 

We now see that 



F w (a,b,c) = ±y/2"(\S \-\S 1 \. 

Therefore, we need only show that |So| — \Si\ < 32 for the result to follow. 
To this end we let 



G{u) = au 2k+1 + bu 23k+l + b 2 - k u 22k+2 ~ k + b 2 - 2k u 2k+2 - 2k + cu 25k+1 + 

2~ k *2^k _|_2~ ^ 2 — ^ 2^ -|-2 — ^ 2 — ^ 2^ -|-2 — ^ 2 — ^ 2^ | 2~^^ 

Note that 

G(u) + G{u) 2 ~ k = uL{u). 



Therefore u G K if and only if G(u) = or 1 (as gcd(k, n) = 1). Furthermore, 
u E Sq if and only if G(u) = 0. 

k 3k 5fc 

Next let x(u) = (-l) Tr ( a « 2 +1+fe " 2 +1+c « 2 As in Lemma 2, it can be 

shown that \ a is a character of if and hence | *Sb | — |<Si| = or \K\. As 

l^ol - l^i I = ^X(u) 

ueK 

it follows that if F w (a) ^ then K — S . That is we can assume L(u) — 
has the same solution set as G(u) = and that \Si\ has no solutions when 
F w (a,b,c) ^ 0. Furthermore, as 

F w (a,b,c)e {0,±^n\SoT)} 

we can say that |£o| must be an odd power of two. It remains to show 
that G(u) = has at most 16 solutions when K = S - For the sake of 
contradiction we assume G(u) = has 32 solutions and that they form an 
additive group. Now apply the identity 

(u + v)(vG(u) + uG(v)) + uv(G(u + v)) = (1) 

for three solutions u, v and u + v with u ^ v and v ^ 0. We then rearrange 
to obtain the following expression 

7 2 — ^ / 2^ 2^ \ / 2 — ^ 2 — ^ \ 7 2 — / 2^ 2^ \ / 2 — ^ 2 — ^ \ 

b [u v + uv ){u v + uv ) + o [u v + uv ){u v + uv ) + 

o — k , o4fc n4fc . , o — fc <-} — k. o — 2fc , o3fc n3fc » , o — 2fc o — 2fc . 

c (it i> + iti; )(it t> + uv ) + c (it v + uv ){u v + uv ) + 

o — 3fc , o 2fc 2 2fc \ / 2 — 3fc 2~ afc \ 2~ 4fc / 2 fc 2 k \/ 2 — 4fc 2 — 4fc \ <-i 

c (it v + uv J (it V + UV )+c [u V + UV )[u v + uv ) — 0. 

Under our assumption the above equation has 32 solutions in u, for a fixed 
(non zero) solution v. Next let u = vw and divide by v 2 to obtain 

o v (w + w ){w + w ) + b v ^ (w + w ){w + w ) + 

2 -k 2 4k +2~ k / , 2 4k \/ , 2~ k \ , 2~ 2fe 2 3k +2~ 2k / , 2 3fc \/ , 2~ 2k \ , 

c f r (to + ur )(u> + mt ) + C f (w + 10 )(w + W ) + 

n — 3k r*2k _i_o — 3k , cy2k . , q — 3fc , o — 4fc ofcio — 4fc , ofc , , o — 4fc . 

c 2 + 2 (ly + w 2 )(w + m; 2 ) + c 2 +2 (w + w 2 )(w + w 2 )=0. 
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Now letting w+w = r, we obtain the following equation, with 16 solutions 
in r which form an additive group as w + w 2 * is 2— to— 1 and linear. 

2 -k 2 2fe +2~ fc / 2 k , 2 2k \/ \ i r,2~ 2fe 2 fc +2~ 2fe / 2~ k \/ , 2~ fc \ , 

b v ^ (r + r ){r) + b v ^ (r )(r + r ) + 

q — fc o4fc_i_o — fc , ofc o2fc o3fc o4fc \ / \ o — 2fc o3fc_i_o — 2fc , ofc o2fc o3fc , , o — fc. 

c 2 +2 (r 2 +r 2 +r 2 +r 2 )(r)+c 2 r 2 +2 (r 2 +r 2 +r 2 )(r+r 2 ) + 

c 2-3fc^ 2 2fc +2 -3fc^ 2 fc +r 2 2k ^ r + r 2- k +r 2- 2fc ) + 

o — 4fc ofcio — 4fc , ofc. , o — fc o — 2fc o — 3fc \ „ 

c 2 w 2 +2 (r 2 )(r + r 2 + r 2 + r 2 ) = 0. 
Rearranging gives 

Ar 2h+1 + 5r 22fc+1 + B 2 ~ k r 2k+2 ~ k + CV 23fc+1 + c 2 ~'Y 22fc+2 ~ fc + 

( j 2 - 2k r 2 k +2- 2k _|_ £) r 2 4fc +l _|_ ^ ) 2- fc r 2 3fc +2- fc + £)2- 2fc ^ 2 2fc +2- 2fc + p2- 3k r 2 k +2~ 3k _ q 

where A, B, C and D are functions of b, c and i>, that is, they are fixed 
elements of the field. Now, re-apply the identity (1) for the above equation 
with three solutions r, s and r + s (where s will be a fixed non zero solution) 
to obtain 

o — fc / ofc ofc, / o — fc o — fc, fc / o2fc o2fc , / o — fc o — fc, 

5 2 (r 2 s + rs 2 )(r 2 s + rs 2 ) + C 2 (r 2 s + rs 2 )(r 2 s + rs 2 ) + 

„,o — 2fc / ofc ofc , / o — 2fc o — 2fc , t-.0 — fc / o3fc o3fc , / o — fc o — fc, 

C 2 (r 2 s + rs 2 )(r 2 s + rs 2 ) + L> 2 (r 2 s + rs 2 )(r 2 s + rs 2 ) + 

^o — 2fc , o2fc o2fc . , o — 2fc o — 2fc . ^o — 3fc , ofc ofc , , o — 3fc o — 3fc , _ 

D 2 (r 2 s + rs 2 )(r 2 s + rs 2 ) + £> 2 (r 2 s + rs 2 )(r 2 s + rs 2 ) = 0. 

Next let r = st, to give the following equation which will have 16 solutions 
in t: 

B 2- k s 2 k +2- k {t + t 2 k ){f + t 2- k ) + ^2-^2^+2-*^ + j2« } {f + ^ ) + 

C 2_2fc s 2fe+2_2fc (t + t 2k ){t + t 2 ~ 2k ) + D 2 ~ k s 23k+2 ~ k (t + t 2 ' ik ){t + t 2 ~ k ) + 

d 2 2k s 22k+2 " k (t + t 22k ) (t + r 2k ) + D 2 ~ 3k s 2k+2 " k (t + t 2k ) (t + r' Ak ) = o. 
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Now let t + t = z to obtain 

fl 2 ~V* +2 "V*)(*) + C 2 ' k s 22k+2 '\z 2k + z 22k )(z) + 
C 2 - 2k s 2k+2 - 2k (z 2k )(z + z 2 ~ k ) + ^-V^-V* + + ^) W + 

^ 2 - 2fe s22fe+2 - 2 , ( ^ fc + ^ ){z + z 2~* ) + D 2"3* s 2*+2-3* ( ^2* ) + ^ + ^ ^ _ Q 

The above equation will have eight solutions in z, which will again form an 
additive group. Now apply the identity (1) for three solutions z,p and z + p 
to get 

7—1/ 2^ 2^ \ / 1~ ^ 2 — ^ \ 7-1/ 2^ 2^ \ / 2 — ^ 2 — ^\ 

p + J(z p + zp ) + r{z p + zp )(z p + zp ) + 

2 -fe. 2 fc 2 fc, , 2 - 2 fc 2~ 2fe \ n 

F (z p + )(z z + zp ) = 0, 

where i? and F are fixed elements of the field. Letting q = zp and dividing 
by p 2 yields 

Ep 2k+2 - k (q + q 2k )(q + q 2 ^) + Fp^ 2 "^ + + ^) + 

F 2 -V +2 " afc (9 + 9 2 *)(9 + 9 2 "*) = 0. 

Now let q + q = d, to obtain the following equation with four solutions in 
d: 

Apply the identity (1) once more, for three solutions d, e and d + e to obtain 

F 2 - k p 2k+2 - 2k {d 2k e + de 2k ){d 2 - k e + de 2 - k ) = 0. 

It needs to be verified at this point that the constant term F 2 k p 2k+2 2k is 
non-zero. This is true as the term is the product of a collection of non-zero 
terms. It follows that the above equation implies {d 2 * "e + de 2 k ) 2k+1 = 0, 
which gives d 2 k e + de 2 k = for which the only solution is d — e. This 
contradiction completes the proof. 
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